Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File: AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier: cblqbgTGhKpbLAZC3LdaJy78PvmT6SMpZUv/iziol5c=
Subject key identifier: F8:1E:02:56:BE:21:D0:F9:A7:41:59:39:C5:40:12:C1:2F:B2:66:25
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 019FA0040D8934C00E5002C34DD118F3EEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number: 19D1
Signing time: Sun 26 Jul 2026 20:00:47 +0000
Manifest this update: Sun 26 Jul 2026 20:00:47 +0000
Manifest next update: Mon 27 Jul 2026 20:00:47 +0000
Files and hashes: 1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: QrVVXB9ImC9PEX11dFpYj0xgj+zCycelijeURFJ8vyc=)
2: NUMsW2fdf3SjrYGEQTRkZNhTS7A.roa (hash: NIqv3PrQsgpG1/zoYtC/m+nGNGEajaJy1aijMy9aHTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:0d:89:34:c0:0e:50:02:c3:4d:d1:18:f3:ee:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Jul 26 20:00:47 2026 GMT
Not After : Jul 27 20:00:47 2026 GMT
Subject: CN=f81e0256be21d0f9a7415939c54012c12fb26625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:ac:c6:29:22:91:bc:c2:21:8d:27:10:a9:
2f:34:ba:f8:82:ac:32:3b:bf:f7:88:6a:fa:0e:e8:
40:9a:2b:be:08:15:38:e3:85:cb:71:a0:3d:a6:77:
ce:7e:0d:b4:c3:6b:c5:4d:9f:21:76:64:36:c6:69:
ac:d7:83:d6:45:0e:5c:fd:d5:ba:1a:5a:02:1a:d3:
80:8f:cb:79:1d:48:37:48:92:15:8c:b6:b7:01:81:
79:fd:8f:68:56:96:3e:5b:2f:4f:98:cc:e1:f4:c2:
23:b0:fe:bd:4c:bb:a1:1e:94:d1:56:07:81:28:c5:
52:5f:60:34:ae:46:51:bf:15:b8:a3:43:f4:5a:46:
55:6e:43:7c:c9:f2:25:60:06:4a:02:b1:33:8a:8c:
0e:21:40:20:05:da:9a:fc:a2:d9:43:64:41:68:80:
b4:bb:16:4d:8e:ba:3d:10:f5:01:80:8b:c4:6e:3f:
b2:b7:1b:a1:40:65:6f:1f:c8:4f:14:81:65:8c:58:
b1:8b:70:90:ac:0e:bb:ea:b0:21:a2:87:42:18:58:
c7:ba:58:f1:70:f2:d3:51:bb:c4:f6:1a:00:73:96:
eb:86:44:87:93:5f:d8:9a:6d:57:d9:43:b4:25:13:
e2:60:a3:7d:89:96:c3:fa:c9:ee:41:8f:db:a3:78:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:02:56:BE:21:D0:F9:A7:41:59:39:C5:40:12:C1:2F:B2:66:25
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f2:93:e6:d4:d4:cc:63:ba:13:b5:e0:a1:d5:91:54:f0:07:
28:61:c3:d2:d3:72:2f:7e:e0:79:d0:ef:82:e8:9c:60:f4:e2:
d0:c0:12:9c:ab:2e:ca:26:e9:71:7c:61:d0:bb:a2:47:1d:01:
e3:a3:1d:67:5d:5f:2c:02:9f:1b:b3:87:bb:86:e5:4e:c8:9c:
13:ff:a6:05:3b:48:3a:1b:05:6c:1c:a8:c5:22:72:74:d2:f8:
3b:fa:1a:d4:ad:23:71:f9:66:27:3c:bf:28:ad:a8:df:22:41:
77:49:f3:37:1b:02:72:57:f1:65:a6:f4:d1:79:a6:5c:d2:aa:
5f:c6:c0:aa:a2:72:ee:20:44:66:4a:8e:56:37:07:ff:aa:da:
3d:75:d8:b5:ff:26:cb:c9:a0:fb:91:e2:fe:c7:99:62:54:56:
11:d5:98:2e:73:ab:40:b8:cc:af:f2:01:c9:3a:50:14:be:2d:
1a:44:05:86:db:25:0d:df:4b:90:ad:29:f8:f7:40:dd:17:98:
f3:7c:67:74:b7:7b:5e:00:d9:38:cb:e6:39:a8:b3:c2:64:ed:
12:51:d5:06:12:50:48:09:ba:98:ee:cb:8c:27:30:5e:ab:cb:
b9:aa:8b:5f:f9:f2:8a:06:61:16:2c:27:d9:2f:7c:5a:5f:30:
60:0a:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:30:35 2026 by rpki-client